On the primary System Manager web console, click Services > Security > Certificates > Authority.
In the navigation pane, in the RA Functions area, click Add End Entity.
In the End Entity Profile field, select the profile that you modified or created earlier.
In the Username field, type a user name.
In the Password field, type a password.
You must use the user name and password while creating the certificate.
In the CN Common Name field, enter the full FQDN of DC1 Avaya Oceana® Cluster 1.
In the Subject Alternative Name area, in the first DNS Name field, enter the FQDN of DC1 Avaya Oceana® Cluster 1.
In the next DNS Name field, enter the Avaya Oceana® Cluster 1 Node 1 Management full FQDN.
In the next DNS Name field, enter the Avaya Oceana® Cluster 1 Node 2 Management full FQDN.
In the next DNS Name field, enter the Avaya Oceana® Cluster 1 Node 3 Management full FQDN.
In the Token field, select P12 file.
Click Add.
Open System Manager public web portal.
On the left panel, click Public Web.
System Manager displays the public web portal for CA functionality.
In the web portal, on the Enroll menu, click Create Keystore.
Enter the Username and Password for the end entity certificate that you created.
From the Key Length list, select 2048 or 4096.
Click Enroll.
The p12 certificate (keystore file) is downloaded to the Downloads folder in your browser.
Save the p12 and CA root certificates to a location that is accessible from Data Center 2. These files are copied to all Avaya Oceana® Cluster 1 nodes in Data Center 1.